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Quantum algorithms are able to solve particular problems exponentially faster than conventional algorithms, 
when implemented on a quantum computer. However, all demonstrations to date have required already knowing 
the answer to construct the algorithm. We have implemented the complete quantum phase estimation algorithm 
for a single qubit unitary in which the answer is calculated by the algorithm. We use a new approach to 
implementing the controlled-unitary operations that lie at the heart of the majority of quantum algorithms that 
is more efficient and does not require the eigenvalues of the unitary to be known. These results point the way 
to efficient quantum simulations and quantum metrology applications in the near term, and to factoring large 
numbers in the longer term. This approach is architecture independent and thus can be used in other physical 
implementations. 



A quantum algorithm is a program, designed to be run on a 
quantum computer, that solves a computational task using less 
physical resources than the best known classical algorithm Q ; 
of most interest are those for which an exponential reduction 
is achieved. The key example is the phase estimation 
algorithm |2|, which provides the quantum speedup in Shor's 
factoring algorithm |3l and quantum simulation algorithms 
L4j 5 |. To date experiments have demonstrated only the read- 
out phase of quantum algorithms, but not the steps in which 
input data is read-in and processed in order to calculate the 
final quantum state; knowing the answer beforehand was 
essential in preparing this state. 

We present a full, scalable demonstration of the iterative 
quantum phase estimation algorithm (IPEA) for a one-qubit 
unitary in which the extracted answer is truly calculated 
by the algorithm. In contrast to previous work, no prior 
knowledge of the unitary is required for the implementation 
of the algorithm. We also use the IPEA circuit to generate 
eigenstates of a unitary, which is important in the context of 
quantum chemistry simulation algorithms |6|, for example. 
The scheme itself is architecture independent and can be 
used in other physical architectures. These results point 
to practical applications of the phase estimation algorithm, 
including quantum simulations and quantum metrology in the 
near term, and factoring in the long term. 

Quantum computation — the processing and read-out of 
information encoded on quantum systems — can in principle 
solve computational problems that are intractable using 
classical computation. Examples of classically intractable 
problems that can be solved by a quantum computer are 
the determination of the prime factors of a large number 
and the simulation of complex chemical reactions. In both 
these examples, the key quantum sub-routine employed is the 
phase estimation algorithm which, given some non-diagonal 
representation of a Hamiltonian plus one of its eigenstates, 
enables the corresponding eigenvalue to be estimated to 
arbitrary precision in polynomial time. 

Many quantum computations can be roughly broken down 
into two sections: read-in and processing of the input data; 



and processing and read-out of the solution. In the first phase 
the initial data is read in to a quantum register and processed 
with quantum gates, sometimes multiple times. This produces 
a quantum state in which the solution is encoded. In the 
second phase the quantum state may be subjected to further 
processing followed by measurement, producing a classical 
data string containing the solution. Even though quantum 
computers are currently limited to a small number of qubit s, 
there is considerable interest in the small scale demonstration 
of quantum algorithms even if the size of the problems 
solved means that they remain easily tractable with classical 
techniques. Such demonstrations remain challenging even 
for small numbers of qubits as they typically require the 
sequential application of a large number of quantum gates. 

In recent years a number of elegant demonstrations of 
the read-out phase of Shor's factoring algorithm ITtUTQI and 
a quantum chemistry simulation algorithm |fTTl| have been 
made. In these demonstrations, quantum gates have been used 
to produce the quantum state corresponding to a particular 
solution of the algorithm. It was then shown that the 
corresponding solution could be read-out with high fidelity 
from this state. However, in each case, the method for 
producing the quantum state explicitly required the solution 
to already be known from a classical calculation. That is, 
the solution was put into the quantum state by hand, before 
being read-out through further processing and measurement. 
It is clearly important to go beyond this restriction and 
demonstrate both phases of a quantum algorithm. 

First, we briefly review the standard phase estimation 
algorithm HI: Given a unitary U and one of its eigenstates 
which fulfill the equation 

U\ilf) = e^^^i/^} (1) 

the task is to find what the corresponding eigenvalue is — in 
other words, find the value of ^. As shown in Fig. [TJa), m 
ancillary qubits act as controls, where each qubit is prepared 
in |0), and the target is the given eigenstate After applying 
a Hadamard gate to each of the control qubits, we obtain the 
state where = (|0) -h |1)). This state can 
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FIG. 1 : The phase estimation algorithm, (a) The standard quantum 
circuit for phase estimation, where H is the standard Hadamard 
gate and QFT~^ is the inverse quantum Fourier transform. The 
measurements are all implemented in computational basis, (b) The 
k^^ iteration of the iterative phase estimation algorithm (IPEA). The 
algorithm is iterated m times to get an m-bit (p (see Eq. |4]), which 
is the approximation to the phase of the eigenstate ip (see Eq. [TJ. 
The measurement is implemented in +/- basis, where |+/-> = 
^ (|0> + Each iteration obtains one estimated bit ipk\ starting 
from the least significant (^m), k is iterated backwards from m to 1. 
The feedback angle cDk depends on the previously measured bits as 
cok - -^^^k, where = 0-0^/t+i^/t+2"-^m in binary expansion and 



also be represented as 



(2) 



Then a series of controlled-unitary gates are applied on the 
state as shown in Fig.[TJa) and thus convert it to 



x=0 



x=0 



(3) 



The target state is intact and all the information about (f is 
contained in the state of the control qubits. The m qubits of 
the control register then undergo an inverse quantum Fourier 
transform (QFT~^), and the control qubits are converted to 
1^1 ) ^ l^2)--- ^ l^m), where (pi (1 < / < m) is an estimated 
bit equal to or 1. By measuring the control qubits in the 
computational basis, one obtains the values of ipi, (f2---(fm and 
the estimated phase in binary expansion: 



(fi = 0.(pi(p2...(Pm 



(4) 



As the inverse quantum Fourier transform can be scalably 
realized in a semiclassical way [12 J where no entangling gates 



are needed, the circuit with m ancillary qubits in Fig. [TJa) 
can be simplified to an m round iterative single ancillary 
qubit circuit. This simplified version is called the iterative 
phase estimation algorithm (IPEA) (TS). Figure [TJb) shows 
the IPEA at the k^^ iteration. At the end of this iteration, a 
measurement of the ancillary qubit in the computational basis 
is performed, yielding the result or 1, which is the estimate 
of the k^'^ bit of (f in the binary expansion. Note that in the 
IPEA scheme the least significant bits are evaluated first (that 
is, k is iterated backwards from m to 1) and the information 
obtained is used to improve the estimation of the more 
significant bits. This information transfer between iterations 
is realized via a single qubit rotation Rz(cok), whose angle is 
determined by all previously measured bits, as described in 
the caption of Fig.[TJb). 

In the case where the phase (f has exactly m bits in binary 
expansion, a perfect implementation of m iterations of the 
algorithm will deterministically extract the exact phase, which 
means (p = (p. When (p has a binary expansion more than 
m bits, it has been proven that a perfect implementation of 
the algorithm achieves a precision of ±2"^ with an error 
probability less than 19%, which is independent of m |13|. 
This error can always be eliminated by simply repeating each 
IPEA iteration several times and choosing the most frequently 
observed result as the corresponding estimated bit. Note that 
this procedure is scalable. 

From the description of the IPEA above, it is clear that the 
key procedure of this algorithm is to implement a sequence of 
controlled unitary gates C-U^'' ^ (see Fig.[ljb)). The standard 
method for implementing a controlled-unitary gate relies on 
its decomposition into controlled-NOT (CNOT) and single- 
qubit gates [TJ . Even for the simplest two-qubit case, where 
the unitary is a single-qubit unitary, two CNOT gates and three 
single-qubit gates are needed to realise this controlled-unitary 
gate Dl. 

Recently, a scheme for simplifying the construction of 
controlled-unitary gates was proposed |14 | and experimen- 
tally demonstrated 1 15 1. Based on this scheme, the realization 
of the IPEA in linear optics has been reported ifTTIl . However, 
this realization has a critical drawback: The method of 
constructing the controlled-unitary gate in that experiment 
is based on decomposing the single-qubit unitary U to the 
product of r, Rz((^) and T~^, where T and are two 
complementary unitary gates and Rz((^) is a phase- shift gate 
with a phase shift in the computational basis. The paradox 
is that one can directly calculate the phase introduced by 
U from the information of how to decompose U in this 
way — i.e. there is no need to use the phase estimation 
algorithm to estimate the phase because it is already known 
exactly. To overcome this and realize the phase estimation 
algorithm generally, control qubits should be added to the 
unitary without already knowing this information. 

We recently proposed and demonstrated a new scheme for 
adding control qubits to quantum gates 1 16 |. In the case of the 
phase estimation algorithm, the key advantage of this scheme 
is that a controlled-unitary gate can be implemented without 



3 



+/- 



U" 


; u 




u 





Feedback 



BS 



A/2 I A/4 



u 



- u 



u 



2r L- 




FIG. 2: (a) Simplified entanglement-based circuit for C-U^^ ^ gate. 
The initial input state is ^ {\H) <S> \i//)r + \V)<S> \i//)b), where is a 
multi-qubit polarization-encoded state and red r and blue b denote 
diff'erent spatial modes of the photons. After the blue modes pass 
through the unitary gate U^'' \ which is realized by cascading 2^~^ 
copies of the red and blue modes of each target qubit are mixed on 
beamsplitters (BS). By post- selecting the case where an even number 
of target photons arrives in lower spatial modes, C-t/^^ ^ is realized 
for the input state |+> where |+> = :^(l^> + The rotation 
Rz((^k) and the measurement in +/- basis are then used to extract 
(fk — the estimate of the k^'^ bit of the phase (p. (b) Experimental 
setup for the ^h iteration of the two-qubit iterative phase estimation 
algorithm (IPEA). A 60 mW continuous- wave (CW) laser beam with 
a central wavelength of 404nm is focused onto a type-II BBO crystal 
to create the polarization entangled photon-pairs. The PBS part of the 
BS/PBS cube and the following waveplates convert the two photons 
to the desired polarization- spatial entangled state (see Equation [7]). 
Based on this state, the C-t/^^ ^ gate is eff'ectively realized, where U 
is the unitary whose eigenvalue is target to be estimated. The rotation 
gate Rz((^k) (for the value of ojk, see the caption of Figure [TJ)) is 
implemented by three waveplates — two quarter- waveplates with a 
half-waveplate in between. The displaced-Sagnac structure make the 
phase between modes 2r and 2b inherently stable. 

needing to know any information about the unitary — i.e. the 
unitary can be a "black box" and still the controlled-unitary 
can be implemented. This feature is critical for the phase 
estimation application. Details of this scheme can be found 
in Ref. 16; 

For the IPEA application, where the control qubit is always 
prepared in state, the implementation of the controlled- 
unitary gate can be simplified. As shown in Fig. [2ja), the 



initial state is -^(\H} ^\i//}r \V} ^\i//}b), where \H) and 
\V} denote horizontal and vertical polarization respectively, 
denotes the given (eigen)state encoded in n polarization 
qubits, r and b denote the red and blue spatial modes 
respectively. 

The blue modes of the target pass through the unitary 
and thus the state is converted to 



l^{\H}^\l/,}r^\V}^U^'''\l/f}t) 



(5) 



Then the red and blue modes of each target qubit are mixed 
on non-polarising beamsplitters (BS) to remove the path 
information and the state is now changed to 



peP ^ ^ 

+ y {\H) ® \>if)c - w) ® 1^^),) 

\hn+l \ ^ ^' 



(6) 



where P {Q) denotes the cases where an even (odd) 
number of target photons arrive in the lower spatial 
modes. By post-selecting any case in P, the desired 
state ) + I V) U^''' is obtained with a (1/2)" 

probability of success. There are 2""^ such cases in P that 
the total probability of success is 1/2, regardless of the size 
of the unitary gate IJ . Here IJ^^ ^ is implemented by simply 
placing 2^"^ copies of the unitary U into the path of the blue 
modes (t/^ could alternatively be realised by 2^"^ passes 
through JJ fTTI). Finally, to finish the iteration, the first qubit 
passes through the rotation Rz(oJk) and is measured in -h/- 
basis to extract (pk — the estimate k^^ bit of the phase (f. 
There is another 1/2 probability that one of the cases in Q 
occurs which means the state {\H) <S> - \ V) <S> U^^ ^ 
is obtained. Using the same procedures will extract the same 
ifk as long as the measurement result of + (-) is redefined as 
1 (0). In this way, the circuit shown in Fig.|2ja) can be used to 
implement the IPEA deterministically — i.e with probability 1. 

By using the entanglement-based controlled-unitary gates 
described above, we implement the IPEA without having to 
already know the value of the phase ip — i.e. without already 
knowing the answer to the algorithm. The experimental setup 
is shown in Fig. [2jb): A 60 mw 404 nm continuous wave 
laser is focused on a BBO crystal cut for type-II spontaneous 
parametric down-conversion (SPDC) to create a two-photon 
polarization-entangled state (|//)i \V)2 + |V)i \H)2), 
where 1 and 2 denote the control and target photons, 
respectively. A special beamsplitter cube, which on one half 
is a non-polarization beamsplitter (BS) and the other half is 
polarization beamsplitter (PBS) |181, is used as shown to 
build a displaced-Sagnac structure to increase the inherent 
phase stability of the setup. The photon 2 passes through the 
PBS part of the BS/PBS cube and thus the two-photon state 
is converted to {\H)i \V)2r + \H)2b)- Waveplates 
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FIG. 3: Phase estimation data for 12 different Us. Each U is composed of two half-waveplates (HWPs); the first is set to 0°, the second HWP 
is oriented at (a) 0°, (b) 15°, (c) 30°, (d) 45°, (e) 60°, (f) 75°, (g) 90°, (h) 105°, (i) 120°, (j) 135°, (k) 150° and (1) 165°. For each U, three 
iterations of the algorithm are implemented and thus a three-digits estimated phase (p is obtained. Compared with the phase (p the error in (p is 
always less then 0.0001 in binary, which is consistent with theoretical prediction. 



are used in the path of 2r and 2b to prepare the required 
polarization- spatial entangled state 

^(|/^)l^l<A)2r + |V)i0|(A)2Z,), (7) 

where is the eigenstate of the target unitary U — i.e U\i//} = 
e^^^li//}. Then, after the blue mode passes through the unitary 
U^'' \ the two modes of photon 2 are combined at the BS 
side of the BS/PBS cube (Fig. ^h)). By post-selecting the 
case where photon 2 exits at port 2, we get the desired two- 
photon state {\H}i <S) {1/^)2 + I V)i 10^)2), which can be 

written as {\H}i -h e^^'''^^'''\V}i) \i/r}2. To finish the k'^ 
iteration, photon 1 passes through the Rz(oJk) gate (ojk is set 
to an angle determined by all previously measured bits; see 
Fig. [TJb) caption) and then is measured in the +/- basis to 
obtain the k^^ bit of the estimated phase. 

We implemented three iterations of the IPEA to estimate the 
value of the phase (f to three bits of precision. The unitaries 
U^,U^, and U are used in the first, second and third iterations, 
and and are realized by four and two consecutive 
U gates, respectively. The U gate is implemented by two 
consecutive HWPs. A convenient feature of this unitary 
is that \R} and |L) are always eigenstates, where \R/L} = 
-j= QH) ± i\V}). This can be understood by considering the 



following fact: a HWP always convert the states \R} ^ |L) 
no matter what the angle of the HWP is. Two consecutive 
HWPs therefore leave \R} and |L) unchanged, up to a phase 
factor — i.e. \R} and |L) are the eigenstates of this unitary U. 
We therefore choose \R} as the input eigenstate Other 
than convenience there is nothing special about this choice of 
U. The eigenvalue of U is determined by the angles of the 
two HWPs. We fixed the angle of the first HWP to 0° and 
changed the second HWP's angle to various values to realize 
a number of different unitaries. For each of these unitaries, 
we get a 3 -digit estimate of the phase (p in binary expansion. 
The results are shown in Fig. |3] We see that the IPEA gives 
an accurate estimate of the phase (p. We note: (i) that (p is 
non-trivially related to ^, i.e. 6 appears in a non-diagonal 
representation of U which must be diagonalized to extract (p; 
and (ii) in principle a third party could prepare the waveplates 
without revealing 6, and the experimenter would still be able 
to successfully extract (p. 

It has been shown 1 19 | that the phase estimation algorithm 
still works even when the input target state is not the eigenstate 
of U (provided the iterations are coherent): Assume the input 
state is a\i//a}-^l3\i//b} where \i//a} and are the eigenstates of 
U with distinctive eigenvalues ^^^"^^ and ^^^"^^ respectively. By 
passing the control and the target through the same circuit as 
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FIG. 4: Using the phase estimation algorithm to generate the eigenstates of U. Panels (a)-(i) show the density matrix of the target output; (L) 
experimental (R) ideal. Unitaries t/i, t/2 and U3 are implemented with a single half-waveplate (HWP)set to 30°, 45° and 67.5°, respectively. 
Panels (a), (b), (c) show the case where the unitary is t/i, U2, t/3, the initial target state is \H) and the measurement outcome of the control 
qubit is 0. Panels (d), (e), (f) show the case where the unitary is t/i, U2, U3, the initial target state is \H) and the measurement result of 
the control qubit is 1. Panels (g), (h), (i) show the case where the unitary is t/i, U2, U^, the initial target state is |y> and the measurement 
result of the control qubit is 0. The output target state is determined only by the measurement result of the control qubit and not affected by 
changing the initial target state, as verified by the similarity between the matrices (a) and (g), (b) and (h), (c) and (i). State tomography and 
maximum-likelihood are used for the reconstruction of the density matrices. The fidelities of the reconstructed density matrices with the ideal 
case are shown. The error estimates are obtained by performing many reconstructions with random noise added to the raw data in each case. 



shown in Fig.[TJa), the state a\(pa} \i/^a} + Pl^fb) ^ Wb) would 
be obtained at the output, where (pa and (pb are the estimates 
of (fa and ifiy, respectively. When the number of control 
qubits is sufficiently large to make ipa and (ph distinguishable, 
measuring the control qubits in the computational basis yields 
either pa, which means the estimated eigenvalue is and 
the target state automatically collapses to the corresponding 
eigenstate or piy, which means the estimated eigenvalue 
is e^^^^ and the target state collapses to the state 10^/^). In 
this way, the phase estimation circuit can be regarded as an 
eigenvalue measuring device or as an eigenstate generator. 

We performed an experiment to show this eigenstate 
generation feature of the phase estimation algorithm. We use a 
similar experimental setup as shown in Fig.|2jb). The U gate, 
whose eigenvalue is the target to be estimated, is implemented 
by a single HWP. Two HWPs oriented at the same angle 
realize an identity operator, which means = I. Based on 
this fact, one can deduce that, for k > 2, all the gates C-U^ 
are equal to identity operators. No iterations are required and 
we implement the only non-trivial circuit C-U (corresponds 
to ^ = 1). We set the initial target state to \H) and measure 
the control photon in the +/- basis. When the result is + 
or -, the target qubit collapses to the eigenstate of U with 
eigenvalue +1 or -1, respectively. To evaluate this process, 
we perform state tomography on the output target state and 
compare the result with the theoretical prediction. The results 



are shown in Figs. |4ja)-(f). The output target state, which 
is only determined by the measurement result of the control 
qubit, is not affected by changing the initial target state. We 
verify this feature by changing the initial target state to \ V} and 
performing the state tomography on the output target state. 
The results are shown in Figs.|4jg)-(i). 

The non-unit fidelities observed above arise primarily due 
to two effects: the partial distinguishability of the photons 
generated in the SPDC source that results in some incoherent 
mixture; and the imperfect optical components, including 
settings of waveplate angles. In the case of the eigenstate 
generation results (Fig. |4]), the fidelities of the output states 
range from 84.83% to 98.96%, which is, in part, due to the 
varying overlap between the input state \H} and the output 
states; this results in a large difference in the output count 
rates. The total counts of the output are -600 s-i inFig.|4]:a) 
and -2200 s"' in Fig .Qc), for example, while the error counts 
of the output are similar in both cases. 

The ability to construct quantum algorithms without the 
need to know the answer in advance is clearly essential to 
their practical application. In the case of the phase estimation 
algorithm this requires that the controlled unitaries C-U^'' ^ 
are realised without already knowing the eigenvalues of U. 
The approach demonstrated here achieves this efficiently and 
opens the way to practical applications of quantum simulation 
algorithms, for calculating molecular properties |11| for 
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example, and metrology applications ifTTl , for enhanced 
measurement precision, in the near term, and factoring in the 
long term. For Shor's factoring algorithm, coherent iterations 
are required 1201 , which can be realized by employing the path 
entangling gates of Ref . \W 

We note that the approach taken here is scalable: the 
IPEA is itself scalable; the scheme of Fig. [2ja) works 
deterministically, provided U can be performed and the 
entangled input state can be prepared; the realization of 
controlled unitaries is scalable to multi-qubit unitaries and 
applicable to any physical implementation where a higher 
dimensional Hilbert space is accessible, which typically 
is the case. Trapped ions systems, for example, offer a 
large number of precisely controllable internal electronic and 
external vibrational degrees of freedom. For photons path 
degrees of freedom, as used here, are ideal, and the required 
entangled input state can be efficiently prepared using the 
'KLM' II2TII or derivative approaches to linear optical quantum 
computing. For other architectures this entangled input may 
be directly prepared using deterministic entangling gates, and 
the BS operations (Fig.|2ja)) would correspond to single qudit 
operations. 
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